CVE Vulnerability

CVE-2008-0416

Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow remote attackers to inject arbitrary web script or HTML via certain character encodings, including (1) a backspace character that is treated as whitespace, (2) 0x80 with Shift_JIS encoding, and (3) "zero-length non-ASCII sequences" in certain Asian character sets.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

References
Link Resource
http://www.debian.org/security/2008/dsa-1484
http://www.debian.org/security/2008/dsa-1485
http://www.debian.org/security/2008/dsa-1489
http://secunia.com/advisories/28839 Vendor Advisory
http://secunia.com/advisories/28864 Vendor Advisory
http://secunia.com/advisories/28865 Vendor Advisory
http://secunia.com/advisories/28879 Vendor Advisory
http://www.ubuntu.com/usn/usn-592-1
http://www.us-cert.gov/cas/techalerts/TA08-087A.html US Government Resource
http://secunia.com/advisories/29541 Vendor Advisory
http://www.securityfocus.com/bid/29303
http://secunia.com/advisories/30327 Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-239546-1
http://secunia.com/advisories/31043 Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1
http://secunia.com/advisories/30620 Vendor Advisory
http://www.turbolinux.com/security/2008/TLSA-2008-9.txt
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000021.html
http://jvn.jp/en/jp/JVN21563357/index.html
http://www.vupen.com/english/advisories/2008/2091/references Vendor Advisory
http://www.vupen.com/english/advisories/2008/1793/references Vendor Advisory
http://www.mozilla.org/security/announce/2008/mfsa2008-13.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/40488
https://usn.ubuntu.com/576-1/
https://bugzilla.mozilla.org/buglist.cgi?bug_id=404252%2C381412%2C407161
Configurations

Configuration 1

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
Information

Published : 2008-02-12 03:00

Updated : 2023-02-13 02:18

NVD link : CVE-2008-0416

Mitre link : CVE-2008-0416

Products Affected

Mozilla

Thunderbird

CWE
CWE-79